💣Exploit CVE-2024-54454 - Kurmi Provisioning Suite Observable Response Discrepancy Directory Brute Force

[Maksim]

CVE ID : CVE-2024-54454
Published : Dec. 27, 2024, 8:15 p.m. | 2 hours, 16 minutes ago
Description : An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or not. This allows confirmation of valid usernames.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.